A windows zero-day vulnerability is being exploited in attacks, with a major turkish defense organization reportedly targeted. The vulnerability is said to enable credential theft and is being exploited in various attacks, although the specific details of the vulnerability and the attacks are not entirely clear. US authorities have issued warnings and patches for the flaw, which is also reported to be related to windows shell and sharepoint vulnerabilities.